Role Based Access Control

Size: px

Start display at page:

Download "Role Based Access Control"

Chrystal Norris
5 years ago
Views:

1 Role Based Access Control Page 1 of 7

2 The Programs (which include both the software and documentation) contain proprietary information of Loom Systems; they are provided under a license agreement containing restrictions on use and disclosure and are also protected by copyright, patent and other intellectual property law. Reverse engineering of the Programs is prohibited. The information contained in this document is subject to change without notice. If you find any problems in the documentation, please report them to us in writing. Loom Systems does not warrant that this document is error-free. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written approval of Loom Systems. The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently dangerous applications. It shall be licensee s responsibility to take all appropriate fail-safe, back up, redundancy and other measures to ensure the safe use of such applications if the Programs are used for such purposes, and Loom Systems disclaims liability for any damages caused by such use of the Programs. This software documentation may provide access to or information about content, products, and services from third parties. Loom Systems is not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Loom Systems. Loom Systems and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Loom Systems. Page 2 of 7

3 Role Based Access Control for Sophie This topic explains what is Role-Based Access Control (RBAC) and how it is implemented in Loom-Systems AI platform Sophie. What is RBAC? Role-based Access Control (RBAC) is a method of regulating access to a computer or network resources based on the roles of individual users within an enterprise. In this context, access is the ability of an individual user to perform a specific task, such as view, create, or change specific data. How can RBAC benefit you? Scenario A- Regulatory reasons: Logs from certain sources contain sensitive data, for example Personally Identifiable Information (PII), or security-related information that not all users in the organization are allowed to see. RBAC allows the organization to apply its policy within Sophie. Scenario B- Multi-Tenancy: This can allow an MSP to control its customers data with different sets of permissions, allowing customers access only to the data that is relevant to them. Implementation in Sophie: Sophie s latest version includes a new concept: Groups. A Data Input can be linked to a specific group, so only users that were associated to the group will have associated permissions to the data. All Monitored Sources generated from this Data Input will automatically inherit the group(s) linked to the Data Input. For a more granular permission, it is possible to set permissions within the child of the Data Input, specific per each Monitored Source. A user, group, or monitored source can be a member of multiple groups. When a user and a source have at least one group in common, the user will be able to access the associated data. Example: Page 3 of 7

4 Data input Name Group Application Source Group Default Syslog Input Openstack_Master Nova Nova_api Openstack_Master Nova Nova_Compute Openstack_Master Nova Cinder Cinder_api Openstack_Master Keystone Keystone Openstack_Master User Name Groups assigned to Permitted applications admin Openstack_Master Nova, Cinder, Keystone user1 Openstack_Master Nova Nova, Cinder, Keystone user2 Nova Nova Elastic Indices and Kibana: Needless to say, the permission policy also applies for the indices. In order to support this, indices in Loom are now defined per Source and not per Application. Future version will allow both views in Kibana. Page 4 of 7

Alerts and Correlations: RBAC won t affect the way Loom calculates alerts or correlations. However, a user will be presented only with alerts and correlations he or she has permissions to.

incident he or she is watching is also correlated to an alert from Cinder, although user1 will be able to see that).

5 Alerts and Correlations: RBAC won t affect the way Loom calculates alerts or correlations. However, a user will be presented only with alerts and correlations he or she has permissions to. So, there could be a case in which a user sees only a partial incident, while a user with superior privileges sees a more comprehensive incident (in the example above, user2 won t see that an incident he or she is watching is also correlated to an alert from Cinder, although user1 will be able to see that). Future versions will include an indication to the user that there is more information to the incident. Defining RBAC 1. Under Manage Users click on Groups. Within this tab you can create and edit groups. 2. Click New in order to create and name new groups. Page 5 of 7

6 3. Add the relevant role(s) to the newly created group. 4. Select desired user you wish to add to a specific group, by clicking on their ID. 5. Assign one of the available groups to the user by clicking Join. Page 6 of 7

Select desired Group you wish to grant access to this Data Input.

7 6. Go to Data Inputs, click on 3 dots at end of relevant Data Input and then select Permissions in drop-down. 7. Select desired Group you wish to grant access to this Data Input. 8. To further limit access you can assign user groups at the source level. Page 7 of 7

Oracle Alert Documentation Updates

Oracle Alert Documentation Updates RELEASE 11.0.1 June 1998 Copyright 1998, Oracle Corporation. All rights reserved. The Programs (which include both the software and documentation) contain proprietary